Run Pulumi Insights on Your Own Infrastructure

Why It Matters

Running Insights on‑premises gives firms full control over sensitive cloud inventory data and ensures compliance with strict regulatory regimes, while preserving the same governance capabilities as the SaaS offering.

Key Takeaways

• Self‑hosted Insights runs on customer‑managed workflow runners.
• Data residency stays within private network, meeting regulatory needs.
• Supports discovery scans across AWS, Azure, GCP, any IaC tool.
• Policy‑as‑code uses TypeScript or Python with pre‑built packs.
• Runners work for SaaS or self‑hosted Pulumi Cloud installations.

Pulse Analysis

Enterprises are increasingly demanding visibility into sprawling multi‑cloud estates while keeping sensitive metadata behind corporate firewalls. Pulumi Insights addresses this tension by offering a unified discovery engine that inventories resources provisioned through Pulumi, Terraform, CloudFormation or manual processes. The new self‑hosted mode extends that capability into private networks, satisfying data‑residency mandates and eliminating the need for third‑party agents that could expose credential stores. In a market where governance‑as‑code is becoming a baseline requirement, Pulumi’s ability to scan and catalog assets without leaving the organization’s perimeter is a differentiator.

The technical backbone of the offering is Pulumi’s customer‑managed workflow runner, a lightweight agent that polls the Pulumi Cloud API, executes jobs locally, and reports results over HTTPS. Because the runner operates outbound‑only, it fits naturally into restricted environments such as air‑gapped VPCs or on‑prem Kubernetes clusters. Teams can reuse existing runner pools that already handle deployments, adding Insight‑specific tasks with minimal configuration. Support for both TypeScript and Python policy‑as‑code, together with pre‑built compliance packs for standards like CIS, NIST, PCI DSS and HITRUST, accelerates adoption and reduces the engineering overhead of building custom checks.

Strategically, Pulumi’s move signals a broader shift toward hybrid governance solutions that blend SaaS convenience with on‑prem control. Companies in regulated sectors—finance, healthcare, government—can now adopt a single platform for continuous compliance without compromising on data sovereignty. This may pressure competing IaC and cloud‑security vendors to expose similar self‑hosted options, intensifying competition in the cloud‑governance market. Early adopters who leverage existing Pulumi runners will likely see faster time‑to‑value, while the broader ecosystem watches for measurable ROI from reduced audit friction and tighter security posture.